dym-impeccable-contributor-build-and-test

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone the source code repository from github.com/pbakaus/impeccable and fetch browser binaries using Puppeteer and Playwright.
  • [COMMAND_EXECUTION]: The instructions include several shell commands for managing the development lifecycle, such as bun install, bun run build, and rm -rf dist build for artifact cleanup.
  • [REMOTE_CODE_EXECUTION]: By running bun install and build scripts, the skill executes code defined in the external repository's configuration and dependency files.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external repository content, including source code and test fixtures, which presents an attack surface for instructions embedded in data.
  • Ingestion points: Cloned repository files (pbakaus/impeccable) and test outputs processed by the Bun test runner.
  • Boundary markers: Not explicitly defined in the instructions for repository file processing.
  • Capability inventory: Shell command execution, file system read/write access, and network operations via git and bun.
  • Sanitization: No specific sanitization or validation of the repository content is mentioned before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 10:35 AM